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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A sub-manager for interfacing between an SNMP 
network management system and a plurality of SNMP managed clients, each of 
such SNMP managed clients being served by a network address translation 
firewall, the sub-manager comprising: 

a network management agent for i) receiving a master SNMP network 
management request message from the SNMP network management system; and 
ii) providing a master SNMP response message to the SNMP network 
management system; 

the master SNMP network management request message includes a 

plurality of variable values, each variable value being identified by a master object 
identifier selected from a master infomiation base, each master object identifier 
comprising: 

a client identifier that identifies a particular one of the plurality 
of SNMP managed clients which has a client management information base that 
includes a reguested variable value: and 

a variable identification portion, the variable identification 
portion being a client obiect identifier that identifies the variable value within the 
client management information base: 

a connections module, for each of the plurality of SNMP managed clients: 
establishing an intemet protocol connection with such SNMP 
managed client through the firewall serving such SNMP managed client; and 

both: i) providing, to each of the plurality of SNP managed clients, a - 
client network management request message; and ii) receiving, from each of the 
plurality of SNMP managed clients, a client response message, in each case, 
through the intemet protocol connection; and 
a message handling module for 
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receiving the master SNIVIP networl< management request messagey 
the mast e r SNMP n e tworl< manag e ment roquost m e ssag e i nclud i ng a plurality of 
master object I dentifi e rB. e ach mactor obj e ct i d e ntifier comprising a c li ont id e nt i fi e r 
that ident i fi e s a particular on e of tho SNMP managed c l i e nts and a var i ab l e portion 
th a t id e nt i fi e s a variabl e valuo w i thin a c l i e nt manag e m e nt information ba se; 

g e n e rat i ng, for each master object identifier included in the master 
SNMP network management request message, generating t he client network 
management request message, the_each-client network management request 
message including the a-client object identifier that identifies the variable value 
within the client management infonnation base; and 

r e c e iving tho c l i e nt r e spons e m e ssago from e ach of th e SNMP 
manag e d c l i e nts to which a c l i e nt n e twork manag e ment mossago was provided, 
each cli e nt r e sponse m e ssago i nc l ud i ng th e cli e nt obj e ct i dontifi e r and tho v a riabl e 
va l u e ; 

qeneratina a aar e aat i na e ach c l i e nt r e sponso m e ssage to gnn a rat ^ a 
mastor SNMP r e spons e messag e , the master SNMP response message from each 
received client response message: 

wherein each client response message including the client object 
identifier and the variable value from the client management information base: and 

wherein the master SNMP response message includes each of 
plurality of i n cludin g the master object identifier s, and each of the master object 

id e ntifi e r and the variable value received in the client response message. 

2. Canceled. 

3. (Cun^ently Amended) The sub-manager of claim 7^47 wherein: 

each internet protocol connection is a TCP/IP connection that is established 
with the.a-SNMP managed client through the firewall serving the sueh-SNMP 
managed client in response to receiving a connection request initiating by the such 

4 
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SNMP managed client; 

the connections module further, in resoonse to receiving an SNMP inform 
messaoe from the SNMP managed client through the internet protocol connection 
the SNMP inform message including the SNMP managed client's client identifier: 
FeGOfds 

spawns a device state machine for the SNMP managed client: and 
records in an active connect'ons table and in association with the 
client identifier: 

for e ach i nt e rn e t protocol conn e ction, a client connection 
identifie r, the client connection identifier comprising the source IP address and 
source port number of the SNMP inform message initiated by the SNMP managed 
client and translated by the firewall serving the client: i n association w i th th e cliont 
i dontifi e r i dont i fying th e SNMP manag e d cl i ent that initiated tho i nternet protoco l 
conn e ction; and 

a device state machine identifier identifying the device state 

machine: and 

the a-device state machine providing prov i d e s the client network 
management request message to the p a rticular on e of the SNMP managed client 
c lie nts by providing the client network management request message over the 
internet protocol connection that associates , in the active connections table, with 
the client identifier of the master object identifier, p a rticu la r on e of th e SNMP 
manag e d c lie nts in th e act i v e conn e ctions tablo. 

4, Canceled. 

5. (Currently Amended) The sub-manager of claim ZL.4-whereln the device 
state machine further provides for: 

periodically receiving a heart beat message from the SNMP managed client 
over the internet protocol connection; each heart beat message including the client 
identifier and a time interval between the heart beat message and a subsequent 

5 
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heart beat message; 

updating the client connection identifier in the active connection table if the 
source IP address or the source port number obtained from the heart beat 
message differs from that of a previous heart beat message; 

providing a heart beat acknowledgement message to the SNMP managed 
client over the intemet protocol connection; and 

determining that the internet protocol connection is inactive if a time period 
in excess of the time interval elapses during which a subsequent heart beat 
message has not been received. 

6. (Previously Amended) The sub-manager of claim 5, wherein the master 
SNMP response message includes an indication that the a value does not exist if 
the value is associated with a master object identifier that includes a client identifier 
associated with an SNMP managed client with which the internet protocol 
connection is inactive. 

7. (Currently Amended) The sub-manager of claim 1, wherein: 

the master SNMP network management request message comprises at 
least two master object identifiers, each master object identifier comprising a client 
identifier that is unique from the client identifier of at least one other master object 
identifier^^T 

8. (Cun-ently Amended) The sub-manager of claim 7^47 wherein the message 
handling module further provides for: 

receiving an asynchronous client Trap message initiated by the,SNMP 
managed client over the internet protocol connection established with the SNMP 
managed client, the asynchronous client Trap message including the a-client object 
identifier and a variable value associated with the client object identifier; 

identifying the SNMP managed client that initiated the asynchronous client 
Trap message; and 

6 
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generating an asynchronous master Trap message and providing the 
asynchronous master Trap message to the SNMP network management system; 
the asynchronous master Trap message including the value and a master object 
identifier, the master object identifier including the a-client identifier identifying the 
SNIVIP managed client that initiated the asynchronous client Trap message and a 
variable portion identifying the variable valu e, the variable portion beino the client 
object identifier . 

9. Canceled. 

10. (Cun^ently Amended) A method of interfacing between an SNMP network 
management system and a plurality of SNIVIP managed clients, each of such 
SNMP managed clients being served by a network address translation firewall, the 
method comprising: 

for each of the plurality of SNMP managed clients, establishing an internet 
protocol connection with the_e ach of tho plura l ity of SNMP manaqed-etien te client 
through the firewall serving the SNMP managed client : 

receiving a master SNMP network management request message from the 
SNMP network management system, the master SNMP networi< management 
request message including a plurality of variable values, each variable value being 
identified bv a m aster object identifier selected from a master information base. 
identifie*^ each master object identifier comprising; 

a client identifier that identifies a particular one of the plurality of 
SNMP managed clients which has and a variabl e port i on that acsQc i at e s w i th a 
v a riab le valu e w i thin -a client management information base that includes a 
reouested variable value: and 

a variable identification portion, the variable identification portion 
being a client object identifier that identifies the reouested variable value within the 
client management information base : 

g o norating, f or each master object identifier included in the master SNMP 

7 
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network management request message, generating a client network management 
request message, the client network management request message including the a 
dient object Identifier that identifies the variable value within the client management 
information base; 

providing each client network management request message to the 
particular one of the SNMP managed clients identified by the client Identifier over 
the internet protocol connection established with such particular one of the SNMP 
managed clients; 

receiving, from each SNMP managed client, a client response, each client 
response message including the client object identifier and the variable value from 
the client management information base : 

aggregating each client response message to generate a master SNMP 
response message, the master SNMP response message including each of t he 
p l ura l ity of master object identifiers and each master object identifier being 
associated with compriGing the cli e nt i d e nt i fi e r and the variable value received in 
the client response message; and 

' providing the master SNMP response message to the SNMP network 
management system. 

11. Canceled. 

1 2. (Currently Amended) The method of claim 16. ^ wherein: 

for each SNMP managed client the e aeh-internet protocol connection is a 
TCP/IP connection established with an SNMP Managed cKont through the firewall 
serving the_su€h-SNMP managed client, in response to receiving a connection 
request initiating by the sue^SNMP managed client; 

tine method further comprise s r e cording in an active conn e ctions tab l oj n 
response to receiving an SNMP infomi message from the SNMP dine through the t 
for each internet protocol connectio n, the SNMP inform message including the 
SNMP managed client's connection identifier: 

8 
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spawning a device state machine for the SNMP managed client: and 
recording, in an active connections table in association with the client 



identifier: 



Ira client connection identifie r, the client connection 



identifier comprisino the source IP address and source port number of the SNMP 
inform messaoe initiated bv the SNMP managed client and translated bv the 
firewall serving the client: and 



machine: and i n a ssoc i at i on w i th the c li ent i d e ntifi e r i d e nt i fying th e fiMMP mnnngnri 

cli e nt that i nitiat e d th e i nt e rn e t protoco l conn e ction; and 

the step of providing each client network management request message to 
the part i cu l ar on e of th e SNMP managed client ctieBts-comprises providing each 
client network management request message over the internet protocol connection 
that associates , in the active connections table, with the client identifier of the 
master object identifier, p art i cular ono of th e SNMP managed n l i e ntc I n th ft nntivn 
connoct i ons t a b ler 

13, Canceled, 

14. (Currently Amended) The method of claim 16. W-further comprising: 
periodically receiving a heart beat message from the SNMP managed client 

over the internet protocol connection; each heart beat message including the client 
Identifier and a time interval between the heart beat message and a subsequent 
heart beat message; 

updating the client connection Identifier in the active connection table if the 
source IP address or the source port number obtained fi-om the heart beat 
message differs from that of a previous heart beat message; 

providing a heart beat acknowledgement message to the SNMP managed 
client over the internet protocol connection; and 

determining that the internet protocol connection is inactive if a time period 



a device state machine identifier identifying the device state 




9 
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in excess of tlie time Interval elapses during which a subsequent heart beat 
message has not been received. 

15. (Previously Amended) The method of claim 14, wherein the master SNMP 
response message includes an indication that the value is unavailable if an open 
internet protocol connection does not exist with the particular on of the SNMP 
managed clients. 

16. (Currently Amended) The method of claim 10, wherein: 

the master SNMP network management request message comprises at 
least two master object identifiers, each master object identifier comprising a client 
identifier that is unique from the client identifier of at least one other master object 
identifier^T 

17. (Currently Amended) The method of claim 16^40rfurther comprising: 

receiving an asynchronous client Trap message from the a-SNMP 
managed client over the internet protocol connection established with the SNMP 
managed client, the asynchronous client Trap message including the a-client object 
identifier and a variable value associated with the client object identifier; 

identifying the SNMP managed client that initiated the asynchronous 
client Trap message; 

generating an asynchronous master Trap message and providing the 
asynchronous master Trap message to the SNMP network management system, 
the asynchronous master Trap message including the variable value and a master 
object identifier, the master object identifier including the a-client identifier 
Identifying the SNMP managed client that initiated the asynchronous client Trap 
message and a variable portion identifying the variable value , the variable portion 
being the client object identifier . 

18. Canceled. 

10 
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